To be fair, they probably have hours of meetings telling them about the importance of compliance and the dozens of onerous security related administrative burde

To be fair, they probably have hours of meetings telling them about the importance of compliance and the dozens of onerous security related administrative burdens that go with it. It can be hard to do the real important security stuff when burdened by the administrative security and audit requirements requisite with government work. A lot of smart people leave in frustration.